j777 Privacy Policy — Pakistan Data Protection Commitment

This Privacy Policy explains how j777 ("j777", "we", "us", "our") — the online betting platform available at j777-bangla.com — collects, uses, stores, and protects the personal information of players and visitors based in Pakistan and elsewhere. The Policy applies to all interactions with j777, including account registration, deposits, placing bets, using live chat support, and simply browsing the platform.

j777 takes data privacy seriously — not as a legal obligation to tick off but because our Pakistani players deserve to know exactly what happens with their information. We keep our data practices as minimal, purposeful, and transparent as possible. We do not collect data we don't need, we do not sell your information to third parties for marketing, and we give you meaningful control over your own data.

This Policy should be read alongside j777's Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between j777 and its players.

j777 collects two categories of personal data: information you provide directly, and information collected automatically when you use the platform.

Information You Provide Directly:

• Identity Data: Full name, date of birth, gender, CNIC number (where required for verification).
• Contact Data: Mobile number, email address, city and province of residence.
• Account Data: Username, password (stored in hashed form — never readable by j777 staff), security questions.
• Financial Data: Payment method details (Easypaisa / JazzCash account numbers, bank account details for IBFT, card type and last four digits for card payments). Full card numbers are handled by our PCI-DSS compliant payment processors — j777 never stores full card numbers.
• Verification Documents: Copies of CNIC, proof of address, or source of funds documentation when required for KYC or AML compliance.
• Communication Data: Messages sent to j777 support via live chat or email, including the content of your queries and our responses.

Information Collected Automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, time spent on each section, bets placed, markets browsed, features used, login and logout timestamps.
• Transaction Data: Full record of all deposits, withdrawals, bets placed, and bet settlements on your j777 account.
• Cookies & Tracking Technologies: Session cookies, persistent cookies, and local storage data as described in Section 8 of this Policy.

j777 uses your personal data only for the purposes listed below. We apply the principle of data minimisation — meaning we use the minimum amount of data necessary for each purpose:

j777 does not use your personal data to build advertising profiles for sale to third parties. We do not share your data with social media platforms. If you receive promotional messages from j777, it is because you have not opted out during registration or in your account notification settings. You can opt out of promotional communications at any time by adjusting your account preferences or contacting support.

j777 processes your personal data on one or more of the following legal bases, depending on the purpose:

• Contract Performance: Processing necessary to provide the j777 service you have registered for — account management, bet settlement, payment processing.
• Legal Obligation: Processing required to comply with applicable law — KYC identity verification, AML transaction monitoring, record-keeping obligations.
• Legitimate Interest: Processing necessary for j777's legitimate business interests where these do not override your rights — fraud prevention, platform security, customer support quality improvement, responsible gaming monitoring.
• Consent: Processing based on your explicit consent — promotional communications, optional analytics cookies. You may withdraw consent at any time without affecting processing already carried out.

j777 does not sell, rent, or trade your personal data. We share data only with the following categories of third parties, only to the extent necessary, and only under binding data processing agreements:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and card payment networks receive the financial data necessary to process your specific transaction. They operate under their own privacy policies as independent data controllers.
• Identity Verification Providers: KYC and document verification partners receive the identity documents you submit during the verification process. These providers are bound by strict confidentiality obligations.
• Technology Infrastructure: Cloud hosting, server, and CDN providers that operate j777's technical infrastructure. These providers process data strictly on j777's instructions and are not permitted to use it for their own purposes.
• Regulatory and Law Enforcement: j777 will disclose personal data to regulators, law enforcement, or courts when legally required to do so. Where possible, j777 will notify you of such a disclosure unless prohibited by law from doing so.
• Fraud Prevention: Shared fraud databases or industry anti-money laundering bodies where j777 has a legal obligation or legitimate interest to participate in industry-level fraud prevention efforts.

j777 will never share your data with advertisers, data brokers, political organisations, or any party for purposes unrelated to the operation and protection of the j777 service.

j777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and j777's servers is protected by TLS 1.3 encryption (HTTPS). The green lock icon in your browser confirms this connection is active.
• Encryption at Rest: Personal data stored in j777's databases is encrypted using AES-256 encryption.
• Password Security: Your j777 password is never stored in readable form. It is hashed using bcrypt with a salt, meaning even j777 staff cannot read your password.
• Access Controls: j777 staff access to personal data is strictly role-based. Only staff who require access to specific data categories to perform their job are granted that access.
• Regular Security Audits: j777 conducts regular security reviews and penetration testing to identify and address vulnerabilities before they can be exploited.
• Two-Factor Authentication: j777 supports 2FA on player accounts. We strongly recommend enabling this feature in your account security settings.

Despite best efforts, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to players, j777 will notify affected players and relevant authorities in accordance with applicable obligations.

j777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Data is retained for the full duration your account remains active on j777.
• Closed Accounts: Following account closure, j777 retains your transaction records, identity verification documents, and account activity logs for a minimum of five years. This is required by applicable AML and financial record-keeping regulations.
• Support Communications: Chat and email support records are retained for 2 years following your most recent interaction.
• Technical Logs: Server and access logs are retained for 12 months for security and fraud investigation purposes.
• Marketing Data: If you have opted into promotional communications, your contact preference is retained until you opt out, at which point it is deleted from marketing lists within 30 days.

When your data reaches the end of its retention period, j777 securely deletes or anonymises it so that it can no longer be associated with you as an individual.

j777 uses cookies and similar tracking technologies to operate the platform, improve performance, and provide a better experience for Pakistani players. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of cookies j777 uses:

• Essential Cookies: Required for j777 to function. These include session cookies that keep you logged in while you browse the platform and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences — such as your chosen sport section, language preference, and notification settings — so you don't have to set them every visit.
• Analytics Cookies: Collect anonymised data about how players use j777 — which pages are visited most, where players leave the registration flow, and how long sessions last. This helps j777 improve the platform. Used only with your consent.
• Security Cookies: Support j777's fraud detection systems by flagging unusual access patterns such as logins from a new device or country.

j777 does not use third-party advertising cookies or tracking pixels that transmit your data to ad networks or social media platforms.

As a j777 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact j777 support via live chat or email with the subject line "Privacy Rights Request":

j777 will respond to all verified privacy rights requests within 30 days. In complex cases, j777 may extend this to 60 days and will notify you of the extension within the initial 30-day window. Identity verification is required before any privacy rights request can be actioned — this is to protect your data from fraudulent requests.

j777 is an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification checks are applied during registration, and j777 reserves the right to request proof of age from any player at any time.

If j777 discovers that a player under the age of 18 has registered an account, that account will be immediately closed, all bets voided, and all data deleted or anonymised in accordance with our data retention policy. Any deposits made by an underage player will be returned to the original payment method.

If you are a parent or guardian and believe a minor has opened a j777 account, please contact support immediately at support@j777-bangla.com with the subject line "Underage Account Report". We will act on this without delay.

j777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will always show the most recent revision date.

When we make material changes to this Policy — changes that meaningfully affect how we collect or use your data — we will notify active j777 account holders via email or via an in-platform notification before the changes take effect. For minor changes (such as clarifications or formatting improvements), we will update the page without separate notification.

Your continued use of j777 after any Policy change takes effect constitutes acceptance of the updated Policy. If you disagree with any changes, you should stop using j777 and contact support to request account closure. Your data will then be handled in accordance with the version of the Policy in effect at the time of closure.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how j777 is handling your personal information, please contact us through any of the following channels:

• Live Chat: Available 24/7 via the chat icon on the j777 platform. For privacy queries, ask to speak with the Data team.
• Email: support@j777-bangla.com — use the subject line "Privacy Query" or "Privacy Rights Request" as appropriate.
• Response Time: j777 aims to acknowledge all privacy queries within 24 hours and provide a full response within 5 business days for general queries and 30 days for formal rights requests.

j777 is committed to resolving data privacy concerns directly and promptly. If you feel your privacy concern has not been adequately addressed, you may escalate to the relevant data protection authority in your jurisdiction.